GRC & Privacy Analyst — AI-Driven Compliance

Thrive Global Holdings, Inc.; United States; Remote; USD 115,000 - 125,000; Full time

Benefits offered by this job

401(k) with company match

Health, dental, and vision benefits

Thrive Time

Job summary

Thrive Global Holdings, Inc. is seeking a detail-oriented GRC and Privacy Analyst to strengthen our security, compliance, and data privacy posture.

You will own and operationalize compliance programs, manage audit cycles, and embed privacy-by-design principles across a health-focused, data-sensitive organization. This role will administer and optimize compliance automation platforms, lead audits, and mature programs across SOC 2, ISO, HIPAA, and NIST frameworks while applying privacy standards

Qualifications

• Experience with GRC and compliance automation applications, especially Vanta.
• Knowledge of security/privacy frameworks: SOC 2, ISO 27001/27701/42001, HITRUST, HIPAA, NIST 800-53, NIST AI RMF.
• Strong understanding of privacy regulations including HIPAA and GDPR.
• Proven experience managing or supporting audits and applying structured project management.
• Familiarity with AI governance and leveraging AI tools in workflows.

Responsibilities

• Administer and optimize compliance automation platforms (e.g., Vanta) and maintain evidence collection.
• Lead and support audits across multiple frameworks with internal stakeholders and external assessors.
• Maintain and mature programs mapped to SOC 2, ISO standards, HITRUST, HIPAA, NIST frameworks.
• Interpret and apply privacy standards including HIPAA and GDPR in data handling practices.
• Conduct risk assessments, track remediation, and manage control documentation.
• Apply project management discipline to compliance initiatives and drive deliverables.

Skills

GRC experience

Vanta or compliance automation

Audit management

HIPAA & GDPR knowledge

AI tooling familiarity

Strong communication

Tools

Vanta

Job description

Thrive Global Holdings, Inc. is seeking a detail-oriented GRC and Privacy Analyst to strengthen our security, compliance, and data privacy posture.

You will own and operationalize compliance programs, manage audit cycles, and embed privacy-by-design principles across a health-focused, data-sensitive organization. This role will administer and optimize compliance automation platforms, lead audits, and mature programs across SOC 2, ISO, HIPAA, and NIST frameworks while applying privacy standards